Privacy Policy

1. Introduction & Scope

luky888 ("luky888", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at luky888.win ("the Platform"). This Privacy Policy ("Policy") explains how luky888 collects, uses, stores, shares, and protects personal data in connection with your use of the Platform and associated services.

This Policy applies to all registered users, visitors, and any other individual whose personal data is processed by luky888 in the course of operating the Platform. By registering a luky888 account or continuing to use the Platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the luky888 Terms & Conditions and Responsible Gaming policy, all of which together govern your relationship with the Platform.

2. Data Controller

For the purposes of applicable data protection legislation, luky888 is the data controller in respect of personal data collected and processed through the Platform. luky888 determines the purposes and means of processing of personal data as described in this Policy.

If you have any questions regarding the identity of the data controller, your rights, or any aspect of this Policy, you may contact us via live chat on the Platform or by email at the address set out in Section 14 of this Policy.

3. Data We Collect

3.1 Data You Provide Directly

When you register a luky888 account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in any promotion, you provide us with personal data including:

• Full legal name and date of birth;
• Email address and contact telephone number;
• Residential address;
• Government-issued identity document details (for KYC purposes);
• Payment method details (processed through our payment partners; full card or account numbers are not stored by luky888 directly);
• Communication records including live chat transcripts and support emails.

3.2 Data Collected Automatically

When you access the luky888 Platform, we automatically collect certain technical and behavioural data, including:

4. How We Use Your Data

luky888 uses the personal data we collect for the following purposes:

• Account creation and management — to register, verify, and administer your luky888 account;
• Service delivery — to process bets, deposits, withdrawals, and all other transactions;
• KYC and identity verification — to comply with our licensing obligations and anti-money laundering (AML) requirements;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, unauthorised account access, and policy violations;
• Customer support — to respond to your enquiries, resolve disputes, and provide assistance;
• Legal and regulatory compliance — to meet obligations under applicable laws and our operating licence;
• Responsible gaming — to monitor for indicators of problem gambling behaviour and to apply player protection measures;
• Marketing and promotions — with your consent, to send you information about luky888 promotions, offers, and updates that may be of interest to you.

5. Legal Basis for Processing

luky888 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration;
• Legal obligation — processing required to comply with applicable laws, including KYC, AML, and licensing requirements;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, balanced against your privacy rights;
• Consent — processing for marketing communications, where you have provided explicit consent that you may withdraw at any time.

6. Cookies & Tracking Technologies

luky888 uses cookies and similar tracking technologies to operate the Platform effectively. Cookies are small text files stored on your device that help us recognise returning users, maintain sessions, and improve your experience.

6.1 Types of Cookies Used

• Essential cookies — required for Platform functionality including session authentication and account security. These cannot be disabled without impacting your ability to use the Platform;
• Analytics cookies — used to understand aggregate usage patterns and improve Platform performance. Data is anonymised where technically feasible;
• Preference cookies — used to remember your language, display, and notification preferences across sessions.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair the functionality of your luky888 account.

7. Sharing & Disclosure of Data

luky888 does not sell your personal data. We may share your data with the following categories of recipients strictly for the purposes described in this Policy:

• Payment processors — to facilitate deposits and withdrawals via Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank, and other accepted methods;
• Game content providers — game providers receive limited technical data (session tokens, bet amounts) to deliver game content. Personal identification data is not shared with game providers;
• KYC and identity verification services — to verify your identity documents in compliance with regulatory requirements;
• Fraud and AML screening services — to detect and prevent money laundering and fraudulent activity;
• Regulatory and law enforcement authorities — where we are legally required or permitted to disclose data by court order, regulatory direction, or applicable law;
• IT infrastructure and security providers — who process data on our behalf under strict contractual data processing terms.

All third-party processors engaged by luky888 are required to implement appropriate technical and organisational security measures and to process data only as instructed by luky888.

8. International Transfers

In certain circumstances, your personal data may be transferred to or accessed from locations outside Malaysia, including in connection with data hosting infrastructure or game provider systems. Where such transfers occur, luky888 takes appropriate measures to ensure that your data receives an equivalent level of protection as it would in Malaysia, including through the use of standard contractual clauses or other approved transfer mechanisms.

9. Data Retention

luky888 retains personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal, regulatory, and licensing retention requirements. As a general guide:

• Account data — retained for the duration of your account and for a minimum period of five (5) years following account closure, in accordance with AML regulatory requirements;
• Transaction records — retained for a minimum of five (5) years from the date of transaction;
• KYC documents — retained in accordance with applicable AML legislation, typically five (5) years from the end of the customer relationship;
• Support communications — retained for three (3) years from the date of the communication, unless required longer for ongoing dispute resolution.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with luky888 data management procedures.

10. Your Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by luky888:

• Right of access — to request a copy of the personal data luky888 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data where luky888 has no legal basis to continue holding it;
• Right to restrict processing — to request that we limit how we use your data in certain circumstances;
• Right to data portability — to receive your personal data in a structured, commonly used format where processing is based on consent or contract;
• Right to withdraw consent — to withdraw consent for marketing processing at any time without affecting the lawfulness of prior processing;
• Right to object — to object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, please contact luky888 via live chat or at the email address in Section 14. We will respond to verified requests within thirty (30) calendar days.

11. Security Measures

luky888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit, encrypted storage of sensitive data at rest, role-based access controls restricting staff access to personal data, regular security assessments and penetration testing of the Platform infrastructure, and incident response procedures for managing any potential data security events.

Despite these measures, no internet-based system can be guaranteed to be completely secure. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, luky888 will notify you and relevant regulatory authorities in accordance with applicable notification requirements.

12. Children's Privacy

The luky888 Platform is strictly restricted to individuals aged 21 years and older. luky888 does not knowingly collect personal data from any person under the age of 21. If luky888 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account closed. If you believe that a minor has registered a luky888 account, please contact our support team immediately.

13. Changes to This Policy

luky888 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform services. Where material changes are made, we will provide reasonable advance notice to registered users via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the luky888 Platform following the effective date of any updated Policy constitutes your acknowledgement and acceptance of the changes. The current effective version of this Policy is always available at luky888.win/privacy-policy.

Last updated: 1 January 2026

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or luky888's handling of your personal data, please contact our Data Privacy team:

• Live Chat: Available 24/7 via the luky888 Platform
• Email: [email protected]

We take all privacy complaints seriously and will investigate and respond to your complaint within a reasonable timeframe. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.